Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/7JttrhGlo3Pv2syJFI5SDu2o5aY.roa
File:                     7JttrhGlo3Pv2syJFI5SDu2o5aY.roa (raw, json)
Hash identifier:          6MOrUJ4ny626j0MpQ+5LFjvB5Q3UaXUDRpEGFAep7Gk=
Subject key identifier:   EC:9B:6D:AE:11:A5:A3:73:EF:DA:CC:89:14:8E:52:0E:ED:A8:E5:A6
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       0193EDA565E63A53A9DF2300981290EEB6F1
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/7JttrhGlo3Pv2syJFI5SDu2o5aY.roa
Signing time:             Sun 22 Dec 2024 09:14:19 +0000
ROA not before:           Sun 22 Dec 2024 09:14:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34918
IP address blocks:        91.239.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ed:a5:65:e6:3a:53:a9:df:23:00:98:12:90:ee:b6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Dec 22 09:14:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec9b6dae11a5a373efdacc89148e520eeda8e5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:07:7d:c9:49:0f:dc:18:42:c9:0b:28:e7:13:
                    33:01:b2:c3:af:e8:cc:3d:29:8b:8c:97:61:5a:60:
                    60:14:8b:86:44:15:01:f6:99:c1:15:d2:8e:23:b7:
                    06:47:e8:35:06:f6:d1:02:a6:45:43:ff:bc:39:67:
                    76:df:42:8a:53:29:e1:5d:39:f5:ac:8e:0f:82:74:
                    9b:10:6d:02:cc:5f:1e:0d:73:76:6f:2f:99:cf:64:
                    0a:d9:83:2b:fd:3a:ba:cb:66:13:fe:1e:5d:15:76:
                    f5:dc:1c:48:d2:81:b8:11:55:87:df:1c:72:13:78:
                    61:c7:36:1c:10:8f:13:e7:b4:c6:af:46:d9:60:cd:
                    61:86:bd:2a:41:22:65:dc:93:32:54:a3:07:49:e6:
                    91:1c:b5:16:56:09:58:10:76:cf:01:12:f4:1b:69:
                    93:fa:de:84:70:69:c5:95:ac:2d:b9:9b:63:02:50:
                    05:69:da:b5:b0:be:b7:47:e8:7c:22:12:9d:ec:11:
                    b3:9f:fa:2c:be:fa:8f:42:ff:d0:10:65:1c:c1:b5:
                    53:d2:f3:ca:6f:02:2c:61:43:c2:5d:8f:ca:a3:09:
                    45:14:64:a4:21:31:52:8f:43:32:af:ce:e1:92:6e:
                    7e:55:49:70:37:af:82:fa:49:e6:7b:38:4d:9a:44:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9B:6D:AE:11:A5:A3:73:EF:DA:CC:89:14:8E:52:0E:ED:A8:E5:A6
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/7JttrhGlo3Pv2syJFI5SDu2o5aY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:12:03:f3:ce:a2:00:f5:06:63:06:ab:d5:06:57:50:a4:
         b4:61:5a:87:f3:bd:9b:8d:da:4e:fe:18:55:c5:89:69:6d:c3:
         5f:58:cc:23:c4:e5:82:70:53:5c:53:c8:fc:bc:fa:57:f6:8e:
         e9:64:c4:27:ce:0d:f9:00:c6:b8:30:b5:4d:6c:6d:1e:f2:37:
         7b:d2:8b:21:32:38:e2:19:21:e9:c6:f8:4d:60:62:a5:57:46:
         4c:aa:96:25:1f:f5:19:0b:29:1f:cd:83:f1:a7:0a:50:80:4f:
         67:59:c1:66:d5:6d:2a:34:81:37:85:7e:aa:41:66:80:0d:07:
         5d:5b:2d:2e:32:a9:11:68:7b:31:50:cb:fd:ad:ee:c9:9a:30:
         43:c7:34:33:91:1f:5e:84:d9:60:f0:e1:11:63:2f:5c:83:4c:
         d3:58:c7:6d:cb:3d:81:a4:7a:54:b0:86:97:78:8e:14:9f:3d:
         f6:86:8a:c0:4e:aa:ab:c8:3f:80:06:63:22:19:fe:cc:bc:61:
         4d:7d:b7:5b:60:5a:10:30:1d:1b:ba:f2:0c:d4:6d:8a:dc:d6:
         0e:66:66:2c:91:0e:32:0e:5b:8c:ca:c6:d4:7d:eb:f6:1f:47:
         eb:f9:5b:0c:c5:d1:43:b3:4a:99:8a:f2:b2:af:b6:40:04:e4:
         a0:8d:f3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:14 2024 by rpki-client on console.sobornost.net